IN THE UNITED STATES DISTRICT COURT 
FOR THE EASTERN DISTRICT OF VIRGINIA 
Alexandria Division 

) 

MICROSOFT CORPORATION, a ) 

Washington corporation, ) 

) 

Plaintiff, ) Civil Action No: 

) 

JOHN DOES I -2 CONTROLLING A j 

COMPUTER NETWORK ) FILED UNDER SEAL PURSUANT 

THEREBY INJURING PLAINTIEE ) TO LOCAL CIVIL RULE 5 

AND ITS CUSTOMERS, ) 

Defendants. | 

) 

_ ) 

COMPLAINT 


This is an aetion to stop eybereriminals from exploiting the COVID-I9 pandemie in an 
attempt to unlawfully obtain aeeess to personal and eonfidential information of Mierosoft 
eustomers. Speoifieally, Defendants in this aetion are part of an online eriminal network whose 
taeties evolved to take advantage of global eurrent events by deploying a COVID-I9 themed 
phishing eampaign targeting Mierosoft eustomers around the world. This sophistieated phishing 
eampaign is designed to eompromise thousands of Mierosoft eustomer aeeounts and gain aeeess 
to eustomer email, eontaet lists, sensitive doeuments, and other personal information. All in an 
attempt to exfiltrate information, re-direet wire transfers, and launeh further eybererime from 
eompromised aeeounts. The relief sought in this aetion is neeessary to stop irreparable and 
ongoing harm to Mierosoft and its eustomers. 

Plaintiff Microsoft Corporation (“Microsoft”) hereby complains and alleges that John 
Does 1-2 (collectively “Defendants”) send phishing emails eontaining deeeptive messages 
eoneerning the global COVID-19 pandemie or other soeially engineered lures in order to induee 
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targeted vietims to eliek on malieious links in those emails. These phishing emails are designed 
to look like they eome from an employer or other trusted souree. Defendants misuse Mierosoft’s 
name and trademarks to further induee vietims to eliek the links and internet with malieious 
software. Egregiously eapitalizing on a publie health erisis, through these sehemes, Defendants 
attempt to gain unauthorized aeeess to vietims’ Mierosoft Offiee 365 aeeounts. Internet 
domains used by Defendants to carry out this criminal scheme are set forth at Appendix A 
to this Complaint, and referred to as the “Malicious Infrastructure.” Microsoft alleges as 
follows: 

NATURE OF THE ACTION 

1. This is an action based upon: (1) the Computer Fraud and Abuse Act, 18 U.S.C. § 
1030; (2) Trademark Infringement under the Lanham Act, 15 U.S.C. § 1114 et seq.; (3) False 
Designation of Origin under the Fanham Act, 15 U.S.C. § 1125(a); (4) Trademark Dilution under 
the Fanham Act, 15 U.S.C. § 1125(c); (5) Trespass to Chattels; (6) Conversion, and (7) Unjust 
Enrichment. Plaintiff seeks injunctive and other equitable relief and damages against Defendants 
who, through their illegal activities, have caused and continue to cause irreparable injury to 
Microsoft, its customers, and the public. 

PARTIES 

2. Plaintiff Microsoft is a corporation duly organized and existing under the laws of 
the State of Washington, having its headquarters and principal place of business in Redmond, 
Washington. 

3. On information and belief, John Doe 1 controls the Malicious Infrastructure in 
furtherance of conduct designed to cause harm to Microsoft, its customers, and the public. 
Microsoft is informed and believes and thereupon alleges that John Doe 1 can likely be contacted 
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directly or through third-parties using the information set forth in Appendix A. 

4. On information and belief, John Doe 2 controls the Malicious Infrastructure in 
furtherance of conduct designed to cause harm to Microsoft, its customers, and the public. 
Microsoft is informed and believes and thereupon alleges that John Doe 2 can likely be contacted 
directly or through third-parties using the information set forth in Appendix A. 

5. Third parties Verisign, Inc., Verisign Information Services, Inc., and Verisign 
Global Registry Services (collectively, “Verisign”) are the domain name registry entities that 
oversee the registration of all domain names ending in “.com,” including the domains used by 
Defendants. Verisign is located at 12061 Bluemont Way, Reston, Virginia 20190, United States. 

6. On information and belief. Defendants jointly own, rent, lease, or otherwise have 
dominion over the Malicious Infrastructure used to carry out the cyberattacks that are the subject 
of this complaint. Microsoft will amend this complaint to allege the Defendants’ true names and 
capacities when ascertained. Microsoft will exercise due diligence to determine Defendants’ true 
names, capacities, and contact information, and to effect service upon those Defendants. 

7. Microsoft is informed and believes and thereupon alleges that each of the 
fictitiously named Defendants is responsible in some manner for the occurrences herein alleged, 
and that Microsoft’s injuries as herein alleged were proximately caused by such Defendants. 

8. On information and belief, the actions and omissions alleged herein to have been 
undertaken by Defendants were actions that they, and each of them, authorized, controlled, 
directed, or had the ability to authorize, control or direct, and/or were actions and omissions each 
Defendant assisted, participated in, or otherwise encouraged, and are actions for which each 
Defendant is liable. Each Defendant aided and abetted the actions and omissions of Defendants 
set forth below, in that each Defendant had knowledge of those actions and omissions, provided 
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assistance and benefited from those aetions and omissions, in whole or in part. Eaeh Defendant 
was the agent of eaeh of the remaining Defendants, and in doing the things hereinafter alleged, 
was aeting within the eourse and seope of sueh ageney and with the permission and eonsent of 
other Defendants. 

JURISDICTION AND VENUE 

9. The Court has subjeet matter jurisdietion over this aetion pursuant to 28 U.S.C. § 
1331 beeause this aetion arises out of Defendants’ violation of The Computer Fraud and Abuse 
Aet (18 U.S.C. § 1030) and the Lanham Aet (15 U.S.C. §§ 1114, 1125). The Court also has 
subjeet matter jurisdietion over Mierosoft’s elaims for trespass to ehattels, eonversion, and unjust 
enriehment pursuant to 28 U.S.C. § 1367. 

10. Venue is proper in this judieial distriet pursuant to 28 U.S.C. § 1391(b) beeause a 
substantial part of the events or omissions giving rise to Mierosoft’s elaims has oeeurred in this 
judieial distriet, beeause a substantial part of the property that is the subjeet of Mierosoft’s elaims 
is situated in this judieial distriet, and beeause a substantial part of the harm eaused by 
Defendants has oeeurred in this judieial distriet. Defendants maintain internet domains 
registered in Virginia, engage in other eonduet availing themselves of the privilege of eondueting 
business in Virginia, and utilize instrumentalities loeated in Virginia and the Eastern Distriet of 
Virginia to earry out aets alleged herein. Venue is proper in this judieial distriet under 28 U.S.C. 
§ 1391(e) beeause Defendants are subjeet to personal jurisdietion in this judieial distriet. 

11. Defendants have affirmatively direeted aetions at Virginia and the Eastern Distriet 
of Virginia by direeting their aetivities, ineluding theft of information, at vietims loeated in the 
Eastern Distriet of Virginia. 

12. Defendants’ Malieious Infrastrueture, partieularly domain names, is registered 
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through Verisign which resides in the Eastern District of Virginia. Defendants use these 
domains to communicate with and control malicious applications that target Microsoft and its 
customers. Defendants have undertaken the acts alleged herein with knowledge that such acts 
would cause harm through domains located in and maintained through facilities in the Eastern 
District of Virginia, targeting customers in the Eastern District of Virginia and elsewhere in the 
United States, thereby injuring Microsoft and its customers. Therefore, this Court has personal 
jurisdiction over Defendants. 

13. Defendants have directed their relevant activity to targeted victims in, among 
other places, Alexandria, Arlington, Chantilly, McLean, Falls Church, Herndon and Reston as 
included in the map at Figure 1 below. 



Figure 1 


FACTUAL BACKGROUND 


Microsoft’s Services and Reputation 

14. Microsoft® is a provider of the Office 365,® OneDrive,® and SharePoint® cloud- 
based business and productivity suite of services, all offered under those trademarks and in 
connection with the Microsoft mark and the Microsoft corporate logo. Microsoft has invested 
substantial resources in developing high-quality products and services. Due to the high quality 
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and effectiveness of Microsoft’s products and services and the expenditure of significant 
resources by Microsoft to market those products and services, Microsoft has generated 
substantial goodwill with its customers, has established a strong brand, has developed the 
Microsoft name and the names of its products and services into strong and famous world-wide 
symbols that are well-recognized within its channels of trade. Microsoft has registered 
trademarks representing the quality of its products and services and its brand, including the 
Microsoft, Office 365, OneDrive and SharePoint trademarks. Copies of the trademark 
registrations are attached as Appendix B to this Complaint. 

Summary of Defendants’ Illegal Activity 

15. Defendants send phishing emails containing deceptive messages concerning the 
global COVID-19 pandemic in order to induce targeted victims to click on malicious links in 
those emails. These phishing emails are designed to look like they come from an employer or 
other trusted source. Once the victims click on the malicious links, they are led to servers which 
present the victims with a malicious Web Application (“Web App”).' The malicious Web App 
interacts with Microsoft’s Office 365 services. Having convinced the victims that the original 
phishing email was sent by a trusted source, the criminals then cause the victims to erroneously 
believe that the Web App also originates from the same trusted source and, most importantly, is 
approved or published by Microsoft. As a result, targeted victims are deceived into clicking a 
button that grants the malicious Web App, and therefore the criminals, access to the victims’ 
Office 365 account including the account contents, such as email, contacts, notes and material 
stored in the victims’ OneDrive for Business cloud storage space and corporate SharePoint 

' For clarity, the references here to a “Web App” do not relate to mobile apps. Rather, the Web 
App is software running on servers controlled by Defendants and which can interact with and 
obtain access to Microsoft Office 365 accounts. 
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document management and storage system. The attacker may also be able to aeeess and alter 
aeeount settings as the attaeker has full eontrol over the aeeount. Until the Web App is disabled 
or token revoked, the attaeker will have eontinued aeeess to the Offiee 365 aeeount. 

16. In this way, the attaekers attempt to gain unauthorized aeeess to Offiee 365 
aeeounts of Mierosoft’s eustomers. Notably, this seheme enables unauthorized aeeess without 
explieitly requiring the vietims to direetly give up their login eredentials at a fake website or 
similar interfaee. Rather, the vietims input their eredentials into legitimate Offiee 365 login 
pages that are not under the eybereriminals’ eontrol. In some instanees, the vietim may 
alternatively be asked to eonfirm the identity linked to their deviee in lieu of entering eredentials. 
Thereafter, the eybereriminals utilize the malieious Web Apps to gain aeeess based on the 
vietims’ previous entry of eredentials. This highly deeeptive seheme has the same praetieal 
effeet as direet theft of eredentials, exeept that the vietims are not aware that they unintentionally 
provided eybereriminals aeeess to their Offiee 365 aeeount. 

17. Mierosoft eommits tremendous resourees to deteeting and bloeking threats to its 
eustomers and their aeeounts. In Deeember 2019, Mierosoft first deteeted early instanees of the 
Defendants’ malieious phishing and Web App seheme and began eolleeting information 
regarding Defendants’ ereation and deployment of the malicious Web Apps and known attempts 
by the Web Apps to aeeess Mierosoft’s eloud infrastrueture. Based on patterns diseovered at that 
time, Mierosoft developed teehnieal means to bloek the Defendants’ aetivity and disabled the 
Web Apps that existed at that time. In this way, Mierosoft was, thus far, able to proteet its 
eustomers. However, reeently Defendants have begun ereating new malieious Web Apps. 
Defendants’ aetivities pose a persistent risk. Defendants have sent millions of phishing emails. 
Defendants eontinue to evolve their taeties, now leveraging messages purporting to be about 
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important COVID-19 issues. Defendants have designed these COVID-19-themed phishing 
emails, like the previous emails, to deeeive reeipients to eliek on a link and thereafter grant 
aeeess to their Offiee 365 aeeounts via new versions of the malieious Web Apps. 

18. Defendants attempted to target Mierosoft eustomers in both the private and publie 

seetors, ineluding businesses in different industries. Defendants frequently targeted the C-suite, 

senior managers, and regional leaders of a variety of businesses and organizations. 

Defendants Use Deceptive COVID-19 Messages and Malicious Web Apps in an Attempt to 

Compromise Office 365 Accounts 

19. Defendants send phishing emails to Mierosoft’s eustomers who are using its 
Offiee 365 email serviee. Defendants design these emails in a manner that deeeptively 
impersonates legitimate eommunieations originating from Mierosoft’s SharePoint or OneDrive 
for Business eloud storage serviees. For example, in these emails. Defendants leverage the 
presenee of the “Mierosoft” and “OneDrive” trademarks, and the presenee of the term 
“SharePoint” in the “From” email address to eonvince recipients that this is a legitimate 
communication from Microsoft. Further, Defendants send phishing emails from email addresses 
that contain references to companies or entities associated with the recipient, such as the name of 
their employer. Defendants may send phishing emails from compromised accounts of parties, 
such as employers or colleagues, within the recipient’s trusted network. 

20. Defendants also include in the phishing emails other deceptive content, usually 
what appears to be a link to “Open” a Microsoft Excel document. In fact, as detailed further 
below, this icon in the email is a malicious link that begins the process of Defendants attempting 
to obtain access to the victims’ Office 365 accounts. Because victims are usually familiar and 
experienced with the legitimate file-share method using OneDrive for Business or SharePoint, 
and because the email appears to originate from a trusted entity (such as an employer) and 
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contains typical data that might appear in a legitimate file-sharing email, the victims are tricked 
into clicking the malicious li nk . 

21. When Defendants first began earrying out this scheme, the phishing emails 
contained deceptive themes associated with generic business activity. For example, the 
malicious Excel link would be named in a manner that uses information suggesting it is 
associated with a trusted entity and business terms such as “Q4 Report - Dec 19.” An example of 
an earlier phishing email is reproduced as Figure 2. Specific information has been redacted here 
to protect the privacy of potential victims. 
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22. Recently, as Defendants have renewed their efforts to target Microsoft and its 
customers, Defendants have created phishing emails containing deceptive themes associated with 
COVID-19. For example. Defendants now name the malicious Excel link in a manner 
suggesting it is associated with a trusted entity and use terms such as “COVID-19 Bonus.” An 
example of such a COVID-19 related phishing email is reproduced as Figure 3. Specific 
information has been redacted here to protect the privacy of potential victims. 


COVK)-19 BonwjdM* H«{ B««n Shared WKh You. 



I 


"5 Microsoft OneDrive 

Figure 3 

23. The scale of these phishing attacks is immense. In just one week. Defendants sent 
phishing emails to millions of Office 365 users. The scale of Defendants’ attempts to reach 
potential victims and Defendants’ ability to continuously create and deploy new malicious Web 
Apps from existing infrastructure demonstrates the substantial ongoing risk posed by 
Defendants. 
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Defendants Attempt to Access Office 365 Through Malicious Web Apps 


24. After Defendants soeially engineer the vietim to elick the link in the body of the 
email, the vietim is then prompted to sign into Mierosoft’s legitimate Offiee 365 portal at 
login.mierosoftonline.eom. The login portal presented to the vietim at this point is refleeted at 
Figure 4 below, where the vietim enters their user name, and at Figure 5, where the vietim 
enters their password; 


Entrr psssyyflrd 

■ I * * 'SI *. ~ 

- 1 * * ' 

Figure 5 

25. Onee the Mierosoft identity platform reeognizes the eredentials, the Defendants 
leverage an industry standard teehnieal faeility used by Mierosoft known as “OAuth 2.0” to 
request aeeess to vietims’ Offiee 365 aeeounts and to deeeive vietims into providing sueh aeeess. 
The following deseribes the proeess by whieh Defendants misuse OAuth 2.0 to obtain aeeess to 
vietims’ Office 365 accounts. 

26. The first step in Defendants’ misuse of OAuth 2.0 involves processing 
information contained within the URL that the Defendants used in the phishing email to take the 
victim to the legitimate Office 365 portal. That URL contains additional information that defines 
the level of access requested by the malicious Web App and to be granted by the unsuspecting 
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Figure 4 
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user. As seen in Figure 6 the malieious URL eontains several elements, highlighted below: 



^ X + 

M loc n.miaotoftonlinc.conv 


.'.iicrosoft 
Sign in 

‘40 




hXXps://login{dot}microsoftonline{dot}coin/common/oau 
th2/v2.0/ authorize?%20 ^Uent_id=fc5d3843-d0e8-4c3fl 
bOee- 

6d407f667751&respon se_type=id _token+code&redirect_u 

ri=https%3A%2F%2F@fficei nven toq fi.cort %3A8081%2F 

office&scope=offline_access%20contacts.read%20user.rea 

d%20mail.read%20notes.read.all%20mailboxsettings.read 

write%20Files.ReadWrite.All%20openid%20profile&state 


Figure 6 


27. First, the malicious URL contains a parameter called “client_id” (highlighted in 
yellow above). The “client id” is an identifier which is processed by the OAuth 2.0 facility to 
identify the Defendants’ malicious Web App. 

28. Second, the malicious URL contains a domain name, in this case 
“officeinventorys.com” (highlighted in green above). That is a domain name controlled by 
Defendants and one of the domain names that is the subject of this action. The Defendants’ 
malicious Web App is hosted on servers associated with this domain name. In addition, once the 
user is deceived into accepting the Web App, authorization codes and/or tokens are sent to the 
servers associated with this domain name. 

29. Third, the malicious URL contains other access parameters that operate as 
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instructions regarding what Office 365 resources to access. Highlighted in blue in the example 
above are parameters that define the level of access to Office 365 “mail,” “contacts,” “files” and 
“notes”. Further, the parameters define access to “read” those resources and to “write” (z.e. 
make changes to) Office 365 mailbox settings and files. Access is only granted once the 
unsuspecting user accepts an OAuth 2.0 request, as discussed further below. 

30. Upon login, the Defendants cause the OAuth 2.0 facility to use the “client id” and 
the access parameters noted above to produce a deceptive user interface that displays the name of 
the malicious Web App and displays a list of access levels for which the malicious Web App is 
requesting consent. Defendants leverage this user interface in a manner that deceptively presents 
the trademark “Microsoft” and the deceptive formulation “0365,” designed to look like the 
genuine Office 365. The deceptive Web App user interface, which the victim still believes to be 
an authorized process associated with a trusted entity (such as an employer), requests the victim 
to grant the following permissions regarding Office 365 access: read contacts, read user profile, 
read user emails, modify mailbox settings (i.e. forwarding rules) and all files. An example of a 
deceptive Web App user interface is shown at Figure 7. 

SB Microsoft 

Permissions requested 

This app would like to: 

Maintain access to data you have given it access to 
Read your contacts 
Sign you in and read your profile 
Read your mail 

N/ Read all OneNote notebooks that you can access 
Read and write to your mailbox settings 
Have full access to all files you have access to 

Accepting these permissions means that you allow this app t 
your data as specified in their terms of service and privacy 
statement. The publisher has not provided links to their t4 


0365 Access 




Figure 7 







31. After the user clicks “Accept,” the OAuth 2.0 system generates an authorization 
code which is subsequently redeemed for one or more authentication tokens for that victim. This 
authentication token effectively serves the same function as the victim’s credentials, 
communicating to the OAuth 2.0 system that the victim is authorized to have access to Office 
365 account. In this way, the attacker is able to access the compromised Office 365 accounts by 
enabling the malicious Web App to gain access to the account in accordance with designated 
access parameters indicated in the graphical user interface depicted in Figure 7. 

32. In this way. Defendants deceive victims to not only log into Office 365 and 
generate needed OAuth 2.0 tokens, but to further click on the “Accept” button, providing 
Defendants unauthorized access to defined resources within the Office 365 account. In this case, 
the victim will have granted access to all of the resources set forth above in Figure 6. Once 
Defendants deceive the victim into clicking “Accept,” the OAuth 2.0 facility sends the 
previously generated OAuth 2.0 token and associated permissions to the Defendants’ malicious 
Web App located at the Defendants’ malicious domain name (“ofliceinventorys.com” in the 
example above). Once the malicious Web App receives the OAuth 2.0 token and associated 
permissions, this enables the Defendants to use the malicious Web App to make API calls to 
access the victim’s Office 365 account. In accessing Microsoft’s Office 365 servers in this way. 
Defendants are accessing, without valid authorization, computers that can be used in interstate 
commerce. 

33. If Defendants were able to successfully access the content of Office 365 accounts 
pursuant to this phishing attack, it would be possible for them to carry out activities such as 
sending deceptive emails from the compromised user, monitoring communications and 
transactions in order to carry out wire fraud or other forms of fraud, or simply stealing further 
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financial credentials, aeeount eredentials or other valuable information that may be available. It 
is both the potential risk of Defendants’ aeeess to Mierosoft’s server resources, in general, and 
the potential risk of these further illegal activities that render the relief requested in this matter 
urgent and eritieal. All of the aetivities described above eause and threaten to eause serious 
injury to Mierosoft and its eustomers. While Mierosoft has taken additional technical measures 
to bloek this type of seheme, the Defendants are persistent and have attempted to eireumvent 
those measures. 

34. Defendants pose a current threat today and an ongoing threat into the future. 

Defendants’ Harmful Domain Names Used to Carry Out 
Attacks Against Microsoft Office 365 Accounts 

35. Defendants use various domain names to host and deliver malieious Web Apps. 
Defendants have also registered domain names to prepare for other illegal activities, sueh as 
attempts to aeeess the eontent of vietims’ emails. The following are domain names that 
Defendants are eurrently leveraging in their infrastrueture, eaeh of whieh is a .COM top-level 
domain (TLD) operated by Verisign as the Internet Corporation for Assigned Names and 
Numbers (ICANN) aceredited registry within the Eastern District of Virginia. 


Domain Names 

Domain 

Registry 

Registry 

Operator 

Registry 

Location 

Domain Registrar 

Registrar 

Location 

officeinventorys.com 

.COM 

Verisign 

VA, United 

States 

NameCheap, Inc. 

AZ, United 

States 

officehnoc.com 

.COM 

Verisign 

VA, United 

States 

NameCheap, Inc. 

AZ, United 

States 

officesuited.com 

.COM 

Verisign 

VA, United 

States 

NameCheap, Inc. 

AZ, United 

States 

officemtr.com 

.COM 

Verisign 

VA, United 

States 

NameCheap, Inc. 

AZ, United 

States 

officesuitesoft.com 

.COM 

Verisign 

VA, United 

States 

NameCheap, Inc. 

AZ, United 

States 

mailitdaemon.com 

.COM 

Verisign 

VA, United 

States 

GoDaddy.com, 

EEC 

AZ, United 

States 


36. As can be seen, many of these domain names are masquerades of Mierosoft’s 
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Office products and services, such as “officeinventorys.com”, “officesuitesoft.com”, and 
“officehnoc.com”. This is consistent with the deceptive nature of the fraud targeting Office 365. 
These domain names are used to create malicious Web Apps, consistent with their deceptive 
theme. Defendants also registered the domain name “mailitdaemon.com,” which has been and is 
used to receive mail forwarded by Office 365 accounts successfully compromised by 
Defendants. In this domain name. Defendants use generic nomenclature seen in regular network 
administration, such as “mail,” “IT” (information technology) and “daemon” (a process used in 
an email server). 

37. These domain names used by Defendants are identified in Appendix A to the 
Complaint. 

Defendants’ Trademark Infringement 

38. In several different ways. Defendants deceive victims and disguise their malicious 
scheme by unauthorized reproduction of Microsoft’s trademarks and brands. For example, as 
seen above and in Appendix A, Defendants have registered domains that leverage the term 
“office” associated with Microsoft’s “Office 365” trademark, brand and services. Additionally, 
in the malicious phishing emails and Web App, Defendants reproduce the trademarks 
“Microsoft,” the Microsoft corporate logo, “Office 365,” “OneDrive,” and “SharePoint,” as well 
as confusingly similar variants such as “0365.” 

39. Further, Defendants have developed a technique where a victim clicking on a 
malicious link in a phishing email is first connected to the legitimate “microsoftonline.com” 
domain name. The victim clicks on the link, in reliance on deceptive information contained in 
the phishing email that causes the victim to mistakenly believe they are connecting to resources 
of a trusted entity such as an employer. This technique deceives and confuses victims into 
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thinking the link is not part of a malicious scheme because the domain name is owned by 
Microsoft and incorporates Microsoft’s trademarks and branded material. Yet, unknown to the 
victim, the Defendants are delivering a malicious Web App that is not in fact affiliated with 
Microsoft or any other trusted entity. In these ways. Defendants’ activities deceptively use 
Microsoft’s trademarks and brands. Defendants’ use of Microsoft trademarks and brands is 
meant to confuse Microsoft’s customers into clicking on malicious links and clicking “Accept” 
in the deceptive Web App user interface, which they mistakenly believe are sponsored by 
Microsoft or trusted entities. 

Harm to Microsoft 

40. Microsoft® is a provider of the Office 365,® OneDrive,® and SharePoint® cloud- 
based business and productivity suite of services, all offered under those trademarks and in 
connection with the Microsoft mark and the Microsoft corporate logo. Microsoft has invested 
substantial resources in developing high-quality products and services. Due to the high quality 
and effectiveness of Microsoft’s products and services and the expenditure of significant 
resources by Microsoft to market those products and services, Microsoft has generated 
substantial goodwill with its customers, has established a strong brand, has developed the 
Microsoft name and the names of its products and services into strong and famous world-wide 
symbols that are well-recognized within its channels of trade. Microsoft has registered 
trademarks representing the quality of its products and services and its brand, including the 
Microsoft, Office 365, OneDrive and SharePoint trademarks. 

41. Defendants use these trademarks, brands and confusingly similar variants in 
phishing emails and web interfaces presented to Microsoft’s customers and potential victims. 
Defendants’ use of Microsoft trademarks and brands is meant to confuse and does cause 
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confusion among Microsoft’s customers and recipients of these eommunications, as those parties 
ineorreetly pereeive a relationship between Mierosoft and the malieious aetivities of Defendants. 

42. All of these aetivities eause injury to Mierosoft. Customers expeet Mierosoft to 
provide safe and trustworthy produets and serviees. There is a great risk that Mierosoft’s 
eustomers, both individuals and the enterprises they work for, may ineorreetly attribute 
Defendants’ malicious activities and the result of those aetivities, to Mierosoft’s produets and 
serviees, should Defendants be able to earry out future attaeks. Therefore, Defendants’ aetivities 
dilute and tarnish the value of these Mierosoft trademarks and brands. The aetivities earried out 
by Defendants, deseribed above, injure Mierosoft and its reputation, brand and goodwill beeause 
vietims targeted by this seheme are likely to ineorreetly believe that Mierosoft is the souree of 
problems eaused by Defendants. 

43. Mierosoft is similarly injured beeause Defendants direet their attempted intrusions 
to aceounts hosted on Microsoft’s servers. Mierosoft must bear this extraordinary burden. 
Mierosoft must develop teehnieal eountermeasures and defenses, to suppress Defendants’ 
aetivities, respond to eustomer serviee issues eaused by Defendants and must expend substantial 
resourees dealing with the injury and eonfusion. Mierosoft has had to expend substantial 
resources to resist the ongoing attempted attaeks on its infrastrueture, produets, serviees, and 
customers. Given that Defendants are eontinuing their targeting of Mierosoft, and that sueh will 
be ongoing, this poses severe risk of injury to Mierosoft, in that it ultimately threatens 
Microsoft’s brands and customer relationships. 

FIRST CLAIM FOR RELIEF 

Violation of the Computer Fraud & Abuse Act, 18 U.S.C, § 1030 

44. Mierosoft ineorporates by referenee each and every allegation set forth above. 
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45. Defendants knowingly and intentionally aeeessed, eontinue to aecess and/or have 
attempted to aeeess proteeted eomputers and networks of Mierosoft and the online aeeounts of 
Mierosoft’s eustomers without authorization and knowingly eaused and/or attempted to eause the 
transmission of a program, information, eode and eommands, resulting in damage to the 
proteeted eomputers and networks, the software residing thereon, and Mierosoft. 

46. Defendants’ eonduet involved interstate and/or foreign eommunieations. 

47. Defendants’ eonduet has eaused a loss to Mierosoft during a one-year period 
aggregating at least $5,000. 

48. Mierosoft seeks injunetive relief and eompensatory and punitive damages under 
18 U.S.C. § 1030(g) in an amount to be proven at trial. 

49. As a direet result of Defendants’ aetions, Mierosoft has suffered and eontinues to 
suffer irreparable harm for whieh there is no adequate remedy at law, and whieh will eontinue 
unless Defendants’ aetions are enjoined. 

SECOND CLAIM FOR RELIEF 

Trademark Infringement Under the Lanham Act - 15 U.S.C. § 1114 et seq. 

50. Mierosoft ineorporates by referenee eaeh and every allegation set forth above. 

51. Defendants have used Mierosoft’s trademarks in interstate eommeree, ineluding 
Mierosoft’s federally registered trademarks for the marks “Mierosoft,” the Mierosoft eorporate 
logo, “Offiee 365,” “OneDrive,” and “SharePoint,” among other trademarks. 

52. As a result of their wrongful eonduet. Defendants are liable to Mierosoft for 
violation of the Lanham Aet. 

53. Mierosoft seeks injunetive relief and eompensatory and punitive damages in an 
amount to be proven at trial. 
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54. As a direct result of Defendants’ actions, Microsoft has suffered and continues to 
suffer irreparable harm for which there is no adequate remedy at law, and which will continue 
unless Defendants’ actions are enjoined. 

55. Defendants’ wrongful and unauthorized use of Microsoft’s trademarks to 
promote, market, or sell products and services constitutes trademark infringement pursuant to 15 
U.S.C. § llUetseq. 

THIRD CLAIM FOR RELIEF 

False Designation of Origin Under The Lanham Act - 15 U.S.C. § 1125(a) 

56. Microsoft incorporates by reference each and every allegation set forth above. 

57. Microsoft’s trademarks are distinctive marks that are associated with Microsoft 
and exclusively identify its businesses, products, and services. 

58. Defendants make unauthorized use of Microsoft’s trademarks. By doing so. 
Defendants create false designations of origin as to tainted Microsoft products that are likely to 
cause confusion, mistake, or deception. 

59. As a result of their wrongful conduct. Defendants are liable to Microsoft for 
violation of the Lanham Act, 15 U.S.C. § 1125(a). 

60. Microsoft seeks injunctive relief and compensatory and punitive damages in an 
amount to be proven at trial. 

61. Asa direct result of Defendants’ actions, Microsoft has suffered and continues to 
suffer irreparable harm for which there is no adequate remedy at law, and which will continue 
unless Defendants’ actions are enjoined. 

FOURTH CLAIM FOR RELIEF 
Trademark Dilution Under The Lanham Act - 15 U.S.C. § 1125(c) 
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62. Microsoft incorporates by reference each and every allegation set forth above. 

63. Mierosoft’s trademarks are famous marks that are assoeiated with Mierosoft and 
exelusively identify its businesses, produets, and services. 

64. Defendants make unauthorized use of Mierosoft’s trademarks. By doing so. 
Defendants are likely to cause dilution by tarnishment of Microsoft’s trademarks. 

65. Microsoft seeks injunctive relief and eompensatory and punitive damages in an 
amount to be proven at trial. 

66. As a direet result of Defendants’ aetions, Mierosoft has suffered and continue to 
suffer irreparable harm for whieh there is no adequate remedy at law, and whieh will eontinue 
unless Defendants’ actions are enjoined. 

FIFTH CLAIM FOR RELIEF 
Common Law Trespass to Chattels 

67. Microsoft incorporates by reference each and every allegation set forth above. 

68. Defendants have used a eomputer and/or computer network, without authority, 
with the intent to eause physieal injury to the property of another. 

69. Defendants have, without authority, used a computer and/or eomputer network of 
Microsoft and the online aecounts of Mierosoft’s customers, without authority, with the intent to 
trespass on the eomputers, eomputer networks, and/or online accounts of Microsoft and its 
customers. 

70. Defendants intentionally caused this conduct and this conduct was unlawful and 
unauthorized. 

71. Defendants’ aetions have caused injury to Mierosoft and have interfered with the 
possessory interests of Mierosoft over its software, serviees, servers, and protected eomputers. 
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72. Microsoft seeks injunetive relief and eompensatory and punitive damages in an 
amount to be proven at trial. 

73. Asa direet result of Defendants’ aetions, Mierosoft has suffered and eontinues to 
suffer irreparable harm for whieh there is no adequate remedy at law, and whieh will eontinue 
unless Defendants’ aetions are enjoined. 

SIXTH CLAIM FOR RELIEF 
Conversion 

74. Mierosoft ineorporates by referenee eaeh and every allegation set forth above. 

75. Mierosoft owns all right, title, and interest in its Offiee 365 software and serviees. 
Mierosoft lieenses its software to end-users. Defendants have interfered with, unlawfully and 
without authorization, and dispossessed Mierosoft of eontrol over its Offiee 365 software and 
serviees. 

76. Defendants have, without authority, used a eomputer and/or eomputer network, 
without authority, with the intent to remove, halt, or otherwise disable or impair eomputer data, 
eomputer programs, and eomputer software from a eomputer or eomputer network. 

77. Defendants have, without authority, used a eomputer and/or eomputer network, 
without authority, with the intent to eause a eomputer to malfunetion. 

78. Defendants have, without authority, dispossessed Mierosoft of eontrol over its 
eomputers and eomputer networks and have dispossessed Mierosoft and its eustomers of eontrol 
over online aeeounts. 

79. Mierosoft seeks injunetive relief and eompensatory and punitive damages in an 
amount to be proven at trial, ineluding without limitation the return of Defendants’ ill-gotten 
profits. 
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80. Asa direct result of Defendants’ actions, Microsoft suffered and continue to 
suffer irreparable harm for which there is no adequate remedy at law, and which will continue 
unless Defendants’ actions are enjoined. 

SEVENTH CLAIM FOR RELIEF 
Unjust Enrichment 

81. Microsoft incorporates by reference each and every allegation set forth above. 

82. The acts of Defendants complained of herein constitute unjust enrichment of the 
Defendants at the expense of Microsoft in violation of the common law. Defendants used, 
without authorization, software belonging to Microsoft to facilitate unlawful conduct inuring to 
the benefit of Defendants. 

83. Defendants profited unjustly from their unauthorized use of Microsoft’s 
intellectual property. 

84. Upon information and belief. Defendants had an appreciation and knowledge of 
the benefit they derived from their unauthorized and unlicensed use of Microsoft’s intellectual 
property. 

85. Retention by the Defendants of the profits they derived from their malfeasance 
would be inequitable. 

86. Microsoft seeks injunctive relief and compensatory and punitive damages in an 
amount to be proven at trial, including without limitation disgorgement of Defendants’ ill-gotten 
profits. 

87. Asa direct result of Defendants’ actions, Microsoft suffered and continues to 
suffer irreparable harm for which there is no adequate remedy at law, and which will continue 
unless Defendants’ actions are enjoined. 
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PRAYER FOR RELIEF 


WHEREFORE, Plaintiff prays that the Court: 

1. Enter judgment in favor of Mierosoft and against the Defendants. 

2. Deelare that Defendants’ conduet is willful and that Defendants acted with fraud, 
malice and oppression. 

3. Enter a preliminary and permanent injunction enjoining Defendants and their 
officers, directors, principals, agents, servants, employees, successors, and assigns, and all 
persons and entities in active concert or participation with them, from engaging in any of the 
activity complained of herein or from causing any of the injury complained of herein and from 
assisting, aiding or abetting any other person or business entity in engaging in or performing any 
of the activity complained of herein or from causing any of the injury complained of herein. 

4. Enter a preliminary and permanent injunction giving Microsoft control over the 
domains used by Defendants to cause injury and enjoining Defendants from using such domains 
or any other similar instrumentalities. 

5. Enter judgment awarding Plaintiff actual damages from Defendants adequate to 
compensate Plaintiff for Defendants’ activity complained of herein and for any injury 
complained of herein, including but not limited to interest and costs, in an amount to be proven 
at trial. 

6. Enter judgment disgorging Defendants’ profits. 

7. Enter judgment awarding enhanced, exemplary and special damages, in an 
amount to be proved at trial. 

8. Enter judgment awarding attorneys’ fees and costs, and 

9. Order such other relief that the Court deems just and reasonable. 
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DEMAND FOR JURY TRIAL 

Microsoft respectfully requests a trial by jury on all issues so triable in accordance with 
Fed. R. Civ. P. 38. 
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Dated: June 30, 2020 


Respeetfully submitted, 

i/Aiv. 


Julia Milewski (VA Bar No. 82426) 

Matthew Welling (pro hac vice) 

CROWELL & MORING LLP 
1001 Pennsylvania Avenue NW 
Washington DC 20004-2595 
Telephone: (202) 624-2500 
Pax: (202)628-5116 

j milewski@erowell.eom 
mwelling@orowell.oom 

Gabriel M. Ramsey (pro hac vice) 
CROWELL & MORING LLP 
3 Embaroadero Center, 26th Ploor 
San Pranoisoo, CA 94111 
Telephone: (415) 986-2800 
Pax: (415)986-2827 

gramsey@orowell.oom 

Attorneys for Plaintiff Microsoft Corporation 
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APPENDIX A 


.COM DOMAINS 


Resistry 
Verisign, Inc, 

Verisign Information Services, Inc, 
Verisign Global Registry Services 
12061 Bluemont Way 
Reston Virginia 20190 
United States 


OFFICEINVENTORYS.COM 


Resistrar 
Namecheap Inc, 

4600 East Washington Street, Suite 305 
Phoenix, AZ 85034 


Domain name: officeinventorys.com 

Registry Domain ID: 2502955959_DOMAIN_COM-VRSN 

Registrar WHOIS Server: whois.nameeheap.eom 

Registrar URL: http://www.namecheap.eom 

Updated Date: 0001-01-01T00:00:00.00Z 

Creation Date: 2020-03-13T16:12:21.00Z 

Registrar Registration Expiration Date: 2021-03-13X16:12:21.OOZ 

Registrar: NAMECHEAP INC 

Registrar I AN A ID: 1068 

Registrar Abuse Contact Email: abuse@namecheap.com 

Registrar Abuse Contact Phone: +1.6613102107 

Reseller: NAMECHEAP INC 

Domain Status: clientTransferProhibited 

https://icann. 0 rg/epp#chentTransferProhibited 

Domain Status: addPeriod https://icann. 0 rg/epp#addPeri 0 d 

Registry Registrant ID: 

Registrant Name: WhoisGuard Protected 
Registrant Organization: WhoisGuard, Inc. 

Registrant Street: P.O. Box 0823-03411 
Registrant City: Panama 
Registrant State/Province: Panama 
Registrant Postal Code: 

Registrant Country: PA 
Registrant Phone: +507.8365503 
Registrant Phone Ext: 

Registrant Fax: +51.17057182 
Registrant Fax Ext: 

Registrant Email: 

649712c9fae543dbblaea0fd78c804ed.protect@whoisguard.com 
Registry Admin ID: 
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Admin Name: WhoisGuard Protected 

Admin Organization: WhoisGuard, Inc. 

Admin Street: P.O. Box 0823-03411 

Admin City: Panama 

Admin State/Province: Panama 

Admin Postal Code: 

Admin Country: PA 

Admin Phone: +507.8365503 

Admin Phone Ext: 

Admin Fax: +51.17057182 

Admin Fax Ext: 

Admin Email: 

649712c9fae543dbblaea0fd78c804ed.protect@whoisguard.com 

Registry Tech ID: 

Tech Name: WhoisGuard Protected 

Tech Organization: WhoisGuard, Inc. 

Tech Street: P.O. Box 0823-03411 

Tech City: Panama 

Tech State/Province: Panama 

Tech Postal Code: 

Tech Country: PA 

Tech Phone: +507.8365503 

Tech Phone Ext: 

Tech Fax: +51.17057182 

Tech Fax Ext: 

Tech Email: 

649712c9fae543dbblaea0fd78c804ed.protect@whoisguard.com 

Name Server: dnsl.registrar-servers.com 

Name Server: dns2.registrar-servers.com 

DNS SEC: unsigned 

URL of the ICANN WHOIS Data Problem Reporting System: 
http ://wdprs .internic .net/ 

»> Last update of WHOIS database: 2020-05-16T11:42:28.55Z «< 

OFFICESUITESOFT.COM 

Registrar 

Namecheap Inc. 

4600 East Washington Street, Suite 305 

Phoenix, AZ 85034 

Domain name: officesuitesoft.com 

Registry Domain ID: 2497852670_DOMAIN_COM-VRSN 

Registrar WHOIS Server: whois.namecheap.com 

Registrar URL: http://www.namecheap.com 

Updated Date: 0001-01-01T00:00:00.00Z 

Creation Date: 2020-02-28T04:39:59.00Z 

Registrar Registration Expiration Date: 2021-02-28T04:39:59.00Z 
Registrar: NAMECHEAP INC 

Registrar I AN A ID: 1068 

Registrar Abuse Contact Email: abuse@namecheap.com 

Registrar Abuse Contact Phone: +1.6613102107 
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Reseller: NAMECHEAP INC 

Domain Status: elientHold tittps://ieann.org/epp#elientHold 
Domain Status: elientTransferProhibited 
https://ioann. 0 rg/epp#olientTransferProt 1 ibited 
Registry Registrant ID: 

Registrant Name: WhoisGuard Pro tooted 
Registrant Organization: WhoisGuard, Ino. 

Registrant Street: P.O. Box 0823-03411 
Registrant City: Panama 
Registrant State/Provinoe: Panama 
Registrant Postal Code: 

Registrant Country: PA 
Registrant Phone: +507.8365503 
Registrant Phone Ext: 

Registrant Fax: +51.17057182 
Registrant Fax Ext: 

Registrant Email: 

361349b7019e4ffeaa8189520398802e.proteot@whoisguard.oom 
Registry Admin ID: 

Admin Name: WhoisGuard Proteoted 
Admin Organization: WhoisGuard, Ino. 

Admin Street: P.O. Box 0823-03411 
Admin City: Panama 
Admin State/Provinoe: Panama 
Admin Postal Code: 

Admin Country: PA 
Admin Phone: +507.8365503 
Admin Phone Ext: 

Admin Fax: +51.17057182 
Admin Fax Ext: 

Admin Email: 

361349b7019e4ffeaa8189520398802e.proteot@whoisguard.oom 
Registry Teoh ID: 

Teoh Name: WhoisGuard Proteoted 
Teoh Organization: WhoisGuard, Ino. 

Teoh Street: P.O. Box 0823-03411 
Teoh City: Panama 
Teoh State/Provinoe: Panama 
Teoh Postal Code: 

Teoh Country: PA 
Teoh Phone: +507.8365503 
Teoh Phone Ext: 

Teoh Fax: +51.17057182 
Teoh Fax Ext: 

Teoh Email: 

361349b7019e4ffeaa8189520398802e.proteet@whoisguard.oom 
Name Server: dnsl.registrar-servers.oom 
Name Server: dns2.registrar-servers.oom 
DNS SEC: unsigned 

URL of the ICANN WHOIS Data Problem Reporting System: 
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http ://wdprs .internic .net/ 

OFFICEHNOC.COM 

Resistrar 

Namecheap Inc. 

4600 East Washington Street, Suite 305 

Phoenix, AZ 85034 

Domain name: officehnoc.com 

Registry Domain ID: 2482044724_DOMAIN_COM-VRSN 

Registrar WHOIS Server: whois.namecheap.com 

Registrar URL: http://www.namecheap.com 

Updated Date: 0001-01-01T00:00:00.00Z 

Creation Date: 2020-01 -19T15:18:12.00Z 

Registrar Registration Expiration Date :2021-01-19X15:18:12.OOZ 
Registrar: NAMECHEAP INC 

Registrar I AN A ID: 1068 

Registrar Abuse Contact Email: abuse@namecheap.com 

Registrar Abuse Contact Phone: +1.6613102107 

Reseller: NAMECHEAP INC 

Domain Status: clientTransferProhibited 
https://icann. 0 rg/epp#clientTransferProhibited 

Domain Status: addPeriod https://icann. 0 rg/epp#addPeri 0 d 

Registry Registrant ID: 

Registrant Name: WhoisGuard Protected 

Registrant Organization: WhoisGuard, Inc. 

Registrant Street: P.O. Box 0823-03411 

Registrant City: Panama 

Registrant State/Province: Panama 

Registrant Postal Code: 

Registrant Country: PA 

Registrant Phone: +507.8365503 

Registrant Phone Ext: 

Registrant Fax: +51.17057182 

Registrant Fax Ext: 

Registrant Email: 

cc9604648d71460288ef63ae22744aa5.protect@whoisguard.com 

Registry Admin ID: 

Admin Name: WhoisGuard Protected 

Admin Organization: WhoisGuard, Inc. 

Admin Street: P.O. Box 0823-03411 

Admin City: Panama 

Admin State/Province: Panama 

Admin Postal Code: 

Admin Country: PA 

Admin Phone: +507.8365503 

Admin Phone Ext: 

Admin Fax: +51.17057182 

Admin Fax Ext: 

Admin Email: 

cc9604648d71460288ef63ae22744aa5.protect@whoisguard.com 
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Registry Tech ID; 

Tech Name: WhoisGuard Protected 

Tech Organization: WhoisGuard, Inc. 

Tech Street: P.O. Box 0823-03411 

Tech City: Panama 

Tech State/Province: Panama 

Tech Postal Code: 

Tech Country: PA 

Tech Phone: +507.8365503 

Tech Phone Ext: 

Tech Fax: +51.17057182 

Tech Fax Ext: 

Tech Email: 

cc9604648d71460288ef63ae22744aa5.protect@whoisguard.com 

Name Server: dnsl.registrar-servers.com 

Name Server: dns2.registrar-servers.com 

DNS SEC: unsigned 

URL of the ICANN WHOIS Data Problem Reporting System: 
http ://wdprs .internic .net/ 

»> Last update of WHOIS database: 2020-05-16T12:23:12.95Z «< 

OFFICESUITED.COM 

Resistrar 

Namecheap Inc. 

4600 East Washington Street, Suite 305 

Phoenix, AZ 85034 

Domain name: officesuited.com 

Registry Domain ID: 2466161464_DOMAIN_COM-VRSN 

Registrar WHOIS Server: whois.namecheap.com 

Registrar URL: http://www.namecheap.com 

Updated Date: 0001-01-01T00:00:00.00Z 

Creation Date: 2019-12-11T20:07:57.00Z 

Registrar Registration Expiration Date: 2020-12-11T20:07:57.00Z 
Registrar: NAMECHEAP INC 

Registrar I AN A ID: 1068 

Registrar Abuse Contact Email: abuse@namecheap.com 

Registrar Abuse Contact Phone: +1.6613102107 

Reseller: NAMECHEAP INC 

Domain Status: clientTransferProhibited 
https://icann. 0 rg/epp#clientTransferProhibited 

Domain Status: addPeriod https://icann. 0 rg/epp#addPeri 0 d 

Registry Registrant ID: 

Registrant Name: WhoisGuard Protected 

Registrant Organization: WhoisGuard, Inc. 

Registrant Street: P.O. Box 0823-03411 

Registrant City: Panama 

Registrant State/Province: Panama 

Registrant Postal Code: 

Registrant Country: PA 

Registrant Phone: +507.8365503 
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Registrant Phone Ext: 

Registrant Fax: +5El7057182 

Registrant Fax Ext: 

Registrant Email: 

32dlef4e2e624df59f656fel399745e4.proteet@whoisguard.eom 

Registry Admin ID: 

Admin Name: WhoisGuard Proteeted 

Admin Organization: WhoisGuard, Ine. 

Admin Street: P.O. Box 0823-03411 

Admin City: Panama 

Admin State/Provinee: Panama 

Admin Postal Code: 

Admin Country: PA 

Admin Phone: +507.8365503 

Admin Phone Ext: 

Admin Fax: +5El7057182 

Admin Fax Ext: 

Admin Email: 

32dlef4e2e624df59f656fel399745e4.proteet@whoisguard.eom 

Registry Teeh ID: 

Teeh Name: WhoisGuard Proteeted 

Teeh Organization: WhoisGuard, Ine. 

Teeh Street: P.O. Box 0823-03411 

Teeh City: Panama 

Teeh State/Provinee: Panama 

Teeh Postal Code: 

Teeh Country: PA 

Teeh Phone: +507.8365503 

Teeh Phone Ext: 

Teeh Fax: +51.17057182 

Teeh Fax Ext: 

Teeh Email: 

32dlef4e2e624df59f656fel399745e4.proteet@whoisguard.eom 

Name Server: dnsl.registrar-servers.eom 

Name Server: dns2.registrar-servers.eom 

DNS SEC: unsigned 

URL of the ICANN WHOIS Data Problem Reporting System: 
http ://wdprs .internie .net/ 

»> Last update of WHOIS database: 2020-05-16T17:23:43.56Z «< 

OFFICEMTR.COM 

RcQistrar 

Namecheap Inc. 

4600 East Washington Street, Suite 305 

Phoenix, AZ 85034 

Domain name: offieemtr.eom 

Registry Domain ID: 246023558l_DOMAIN_COM-VRSN 

Registrar WHOIS Server: whois.nameeheap.eom 

Registrar URL: http://www.nameeheap.eom 

Updated Date: 0001-01-01T00:00:00.00Z 
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Creation Date: 2019-11-27T01:01:50.00Z 

Registrar Registration Expiration Date: 2020-11-27X01:01:50.00Z 

Registrar: NAMECHEAP INC 

Registrar I AN A ID: 1068 

Registrar Abuse Contact Email: abuse@nameclieap.com 

Registrar Abuse Contact Phone: +1.6613102107 

Reseller: NAMECHEAP INC 

Domain Status: clientTransferProhibited 

https://icann. 0 rg/epp#clientTransferProhibited 

Domain Status: addPeriod https://icann. 0 rg/epp#addPeri 0 d 

Registry Registrant ID: 

Registrant Name: WhoisGuard Protected 
Registrant Organization: WhoisGuard, Inc. 

Registrant Street: P.O. Box 0823-03411 
Registrant City: Panama 
Registrant State/Province: Panama 
Registrant Postal Code: 

Registrant Country: PA 
Registrant Phone: +507.8365503 
Registrant Phone Ext: 

Registrant Eax: +51.17057182 
Registrant Eax Ext: 

Registrant Email: 

ca3 5 7c245790440db 15 de3 6d422c3d 18 .protect@whoisguard.com 
Registry Admin ID: 

Admin Name: WhoisGuard Protected 
Admin Organization: WhoisGuard, Inc. 

Admin Street: P.O. Box 0823-03411 
Admin City: Panama 
Admin State/Province: Panama 
Admin Postal Code: 

Admin Country: PA 
Admin Phone: +507.8365503 
Admin Phone Ext: 

Admin Eax: +51.17057182 
Admin Eax Ext: 

Admin Email: 

ca3 5 7c245790440db 15 de3 6d422c3d 18 .protect@whoisguard.com 
Registry Tech ID: 

Tech Name: WhoisGuard Protected 
Tech Organization: WhoisGuard, Inc. 

Tech Street: P.O. Box 0823-03411 
Tech City: Panama 
Tech State/Province: Panama 
Tech Postal Code: 

Tech Country: PA 
Tech Phone: +507.8365503 
Tech Phone Ext: 

Tech Eax: +51.17057182 
Tech Eax Ext: 
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Tech Email: 

ca3 5 7c245790440db 15 de3 6d422c3d 18 .protect@whoisguard.com 

Name Server: pdnsl.registrar-servers.com 

Name Server: pdns2.registrar-servers.com 

DNS SEC: unsigned 

URL of the ICANN WHOIS Data Problem Reporting System: 
http ://wdprs .internic .net/ 

»> Last update of WHOIS database: 2020-05-I6T2I:24:09.7IZ «< 

MAILITDAEMON.COM 

GoDaddy.com, LLC 

14455 North Hayden Rd,, Ste, 219 

Scottsdale, AZ 85260 

Domain Name: maihtdaemon.com 

Registry Domain ID: 2466584834_DOMAIN_COM-VRSN 

Registrar WHOIS Server: whois.godaddy.com 

Registrar URL: http://www.godaddy.com 

Updated Date: 2019-12-13T04:09:33Z 

Creation Date: 2019-12-13T04:09:32Z 

Registrar Registration Expiration Date: 2020-12-13T04:09:32Z 

Registrar: GoDaddy.com, EEC 

Registrar I AN A ID: 146 

Registrar Abuse Contact Email: abuse@godaddy.com 

Registrar Abuse Contact Phone: +1.4806242505 

Domain Status: clientTransferProhibited 
http://www.icann. 0 rg/epp#clientTransferProhibited 

Domain Status: clientUpdateProhibited 
http://www.icann. 0 rg/epp#clientUpdateProhibited 

Domain Status: clientRenewProhibited 
http://www.icann. 0 rg/epp#clientRenewProhibited 

Domain Status: clientDeleteProhibited 
http://www.icann. 0 rg/epp#clientDeleteProhibited 

Registry Registrant ID: Not Available Prom Registry 

Registrant Name: Registration Private 

Registrant Organization: Domains By Proxy, LEC 

Registrant Street: DomainsByProxy.com 

Registrant Street: 14455 N. Hayden Road 

Registrant City: Scottsdale 

Registrant State/Province: Arizona 

Registrant Postal Code: 85260 

Registrant Country: US 

Registrant Phone: +1.4806242599 

Registrant Phone Ext: 

Registrant Pax: +1.4806242598 

Registrant Pax Ext: 

Registrant Email: mailitdaemon.com@domainsbyproxy.com 

Registry Admin ID: Not Available Prom Registry 

Admin Name: Registration Private 

Admin Organization: Domains By Proxy, LLC 

Admin Street: DomainsByProxy.com 
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Admin Street: 14455 N. Hayden Road 
Admin City: Seottsdale 
Admin State/Provinee: Arizona 
Admin Postal Code: 85260 
Admin Country: US 
Admin Phone: +1.4806242599 
Admin Phone Ext: 

Admin Fax: +1.4806242598 
Admin Fax Ext: 

Admin Email: mailitdaemon.com@domainsbyproxy.eom 

Registry Tech ID: Not Available From Registry 

Tech Name: Registration Private 

Tech Organization: Domains By Proxy, EEC 

Tech Street: DomainsByProxy.com 

Tech Street: 14455 N. Hayden Road 

Tech City: Scottsdale 

Tech State/Province: Arizona 

Tech Postal Code: 85260 

Tech Country: US 

Tech Phone: +1.4806242599 

Tech Phone Ext: 

Tech Fax: +1.4806242598 
Tech Fax Ext: 

Tech Email: mailitdaemon.com@domainsbyproxy.com 
Name Server: NS17.DOMAlNCONTROE.COM 
Name Server: NS18.DOMAlNCONTROL.COM 
DNS SEC: unsigned 

URL of the ICANN WHOIS Data Problem Reporting System: 
http ://wdprs .internic .net/ 

»> Last update of WHOIS database: 2020-05-17T09:00:00Z «< 
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APPENDIX B 



6/15/2020 


Trademark Electronic Search System (TESS) 



United States Patent and Trademark Office 

Home I Site Index | Search | FAQ | Glossary | Contacts | eBusiness | eBiz alerts | News 


Trademarks > Trademark Electronic Search System (TESS) 


TESS was last updated on Mon Jun 15 04:12:23 EDT 2020 


TESS HOME 1 

NEW USER 

Structured 

Free Form 


Prev Doc 

Next Doc 

Last Doc 


Logout Please logout when you are done to release system resources allocated for you. 

to record: [ 1 Record 1 out of 36 


start 


List At; 


OR 


Jump 


( Use the "Back" button of the Internet Browser to return to 

TESS) 


MICROSOFT 


Word Mark MICROSOFT 

Goods and 1C 009. US 021 023 026 036 038. G & S: Computer peripherals; computer keyboards; computer mice; Computer 

Services programs for wallet-sized personal computers, namely, personal information manager programs with calendars, 
contact information files and to do lists; note taking programs; programs for facilitating voice, text and pen input; 
electronic mail program; access programs for global communication networks; programs for wireless 
communications; computer programs for use in developing other programs for use on wallet-sized personal 
computers; computer programs for use with phones and pagers; computer programs for accessing global 
communication networks and displaying content therefrom; computer programs for use with hand-held computers, 
namely, operating system and utility programs; business application programs for use with hand-held computers; 
Computer operating system programs and utilities; computer application software for wireless telecommunications 
for use with wireless devices; computer software to enable uploading, downloading, accessing, posting, displaying, 
tagging, blogging, streaming, linking, sharing or otherwise providing electronic media or information via computer 
and communication networks; software for allowing communication and interaction between phones, mobile 
devices, televisions, video game consoles, media players, computers, digital media hubs, and audiovisual devices; 
computer software for use by computer network administrators to deploy and manage application software and 
network server software; computer network server software for managing user content on computer networks and 
global computer networks; computer software for managing secure communications over computer networks and 
global computer networks; computer software for developing, managing and operating intranet sites; computer 
network operating software and utilities; computer software development tools for network servers and 
applications; computer software for inventorying and monitoring computer hardware and software assets and use 
within an organization; computer application programs and operating system programs for use with 
communications servers; computer programs for managing communications and data exchange between 
computers and electronic devices; operating systems software for use in playing electronic games; computer 
hardware and peripherals; computer mice and wireless computer mice; wireless communications devices, namely, 
mobile phones, cellular telephones, personal digital assistants, and hand-held computers; hardware for 
telecommunications for connecting devices via in-home phone and electrical wiring, namely, computer networks 
hubs, computer servers, set-top boxes, computer switches and computer routers designed to provide in-home 
voice over Internet protocol (VoIP) communications; computer and video game systems devices, namely, electronic 
sensor devices, cameras, projectors, headphones, and microphones; electronic game equipment, namely, 
equipment communicating with a television or computer for playing electronic games; Computer software for virtual 
reality visualization, manipulation, immersion and integration of audio, video, text, binary, still images, graphics and 
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multimedia files; wearable computers; wearable computer peripherals; virtual reality headsets for use in 
visualization, manipulation, immersion and integration of audio, video, text, binary, still images, graphics and 
multimedia files; computer peripherals for mobile devices for remotely accessing and transmitting data; computer 
peripherals for displaying data and video; computer software, namely, software for setting up, operating, 
configuring, and controlling wearable computer hardware and wearable computer peripherals; apparatus for 
recording, transmission or reproduction of sound, images, or data; electronic and optical communications 
instruments and components, namely, display screens for virtual reality visualization, manipulation, immersion and 
integration of audio, video, text, binary, still images, graphics and multimedia files; 3D spectacles; hologram 
apparatus; holographic apparatus for projecting holographic video, still images, graphics and multimedia files. 
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Word Mark MICROSOFT 

Goods and 1C 042. US 100 101. G & S: providing information in a wide variety of fields over computer networks and global 
Services communication networks; providing general reference information over computer networks and global 

communication networks; providing information concerning parenting and children's health, nutrition, and well being 
over computer networks and global communication networks; providing information concerning computers and 
computer software over computer networks and global communication networks; providing access to computer data 
bases and web sites of others in various fields by means of a global communications network; computer and 
software services, namely, providing interactive electronic retailing and on-line ordering and information systems for 
use by others; [ computer services, namely, hosting web sites and providing web site operation and management 
services to others in the fields of on-line retailing and ordering, restaurant and travel information and reservations; 
leasing computer facilities to others for the purpose of their providing interactive retailing, on-line ordering, and 
restaurant and travel information and reservations, on a computer server for a global communication network; 
]providing bulletin board services and chat services by means of global communication networks. FIRST USE: 
19950307. FIRST USE IN COMMERCE: 19950307 
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MICROSOFT 

1C 009. US 021 023 026 036 038. G & S: [ computer programs for use in automobiles, namely, computer programs 
for monitoring automobile performance, for mapping and navigation, for electronic mail and wireless 
communication, for maintaining personal directories, contact lists, address and telephone number lists; ] operating 
system programs and utilities; [ computer programs for use in the development of other programs for use in 
automobile computers; ] and computer programs for providing entertainment, traffic information, news and other 
information; computer programs for wallet-sized personal computers, namely, personal information manager 
programs with calendars, contact information files and to do lists; note taking programs; programs for facilitating 
voice, text and pen input; electronic mail program; access programs for global communication networks; programs 
for wireless communications; operating system programs and utilities; computer programs for use in developing 
other programs for use on wallet-sized personal computers; computer programs for use with phones [ and pagers; 

] computer programs for accessing global communication networks and displaying content therefrom; [ computer 
programs for electronic pagers and electronic pager modules, namely, operating system programs and utilities; ] 
computer programs for providing [ paging and ] wireless communication functions; computer programs for use with 
hand-held computers, namely, operating system and utility programs; a full line of business application programs 
for use with hand-held computers. FIRST USE: 19800600. FIRST USE IN COMMERCE: 19811200 
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MICROSOFT 


Word Mark MICROSOFT 

Goods and 1C 009. US 021 023 026 036 038. G & S: Computer peripherals; computer keyboards; computer mice; Computer 

Services programs for wallet-sized personal computers, namely, personal information manager programs with calendars, 
contact information files and to do lists; note taking programs; programs for facilitating voice, text and pen input; 
electronic mail program; access programs for global communication networks; programs for wireless 
communications; computer programs for use in developing other programs for use on wallet-sized personal 
computers; computer programs for use with phones and pagers; computer programs for accessing global 
communication networks and displaying content therefrom; computer programs for use with hand-held computers, 
namely, operating system and utility programs; business application programs for use with hand-held computers; 
Computer operating system programs and utilities; computer application software for wireless telecommunications 
for use with wireless devices; computer software to enable uploading, downloading, accessing, posting, displaying, 
tagging, blogging, streaming, linking, sharing or otherwise providing electronic media or information via computer 
and communication networks; software for allowing communication and interaction between phones, mobile 
devices, televisions, video game consoles, media players, computers, digital media hubs, and audiovisual devices; 
computer software for use by computer network administrators to deploy and manage application software and 
network server software; computer network server software for managing user content on computer networks and 
global computer networks; computer software for managing secure communications over computer networks and 
global computer networks; computer software for developing, managing and operating intranet sites; computer 
network operating software and utilities; computer software development tools for network servers and 
applications; computer software for inventorying and monitoring computer hardware and software assets and use 
within an organization; computer application programs and operating system programs for use with 
communications servers; computer programs for managing communications and data exchange between 
computers and electronic devices; operating systems software for use in playing electronic games; computer 
hardware and peripherals; computer mice and wireless computer mice; wireless communications devices, namely, 
mobile phones, cellular telephones, personal digital assistants, and hand-held computers; hardware for 
telecommunications for connecting devices via in-home phone and electrical wiring, namely, computer networks 
hubs, computer servers, set-top boxes, computer switches and computer routers designed to provide in-home 
voice over Internet protocol (VoIP) communications; computer and video game systems devices, namely, electronic 
sensor devices, cameras, projectors, headphones, and microphones; electronic game equipment, namely, 
equipment communicating with a television or computer for playing electronic games; Computer software for virtual 
reality visualization, manipulation, immersion and integration of audio, video, text, binary, still images, graphics and 


tmsearch.uspto.gov/bin/showfield?f=doc&state=4806:qr6z0.3.6 


1/2 






























6/15/2020 


Trademark Electronic Search System (TESS) 


multimedia files; wearable computers; wearable computer peripherals; virtual reality headsets for use in 
visualization, manipulation, immersion and integration of audio, video, text, binary, still images, graphics and 
multimedia files; computer peripherals for mobile devices for remotely accessing and transmitting data; computer 
peripherals for displaying data and video; computer software, namely, software for setting up, operating, 
configuring, and controlling wearable computer hardware and wearable computer peripherals; apparatus for 
recording, transmission or reproduction of sound, images, or data; electronic and optical communications 
instruments and components, namely, display screens for virtual reality visualization, manipulation, immersion and 
integration of audio, video, text, binary, still images, graphics and multimedia files; 3D spectacles; hologram 
apparatus; holographic apparatus for projecting holographic video, still images, graphics and multimedia files. 
FIRST USE: 19751112. FIRST USE IN COMMERCE: 19751112 
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Microsoft 


Word Mark MICROSOFT 

Goods and 1C 009. US 021 023 026 036 038. G & S: Computer operating system programs and utilities; computer application 

Services software for wireless telecommunications for use with wireless devices; computer software to enable uploading, 
downloading, accessing, posting, displaying, tagging, blogging, streaming, linking, sharing or otherwise providing 
electronic media or information via computer and communication networks; software for allowing communication 
and interaction between phones, mobile devices, televisions, video game consoles, media players, computers, 
digital media hubs, and audiovisual devices; computer software for use by computer network administrators to 
deploy and manage application software and network server software; computer network server software for 
managing user content on computer networks and global computer networks; computer software for managing 
secure communications over computer networks and global computer networks; computer software for 
developing, managing and operating intranet sites; computer network operating software and utilities; computer 
software development tools for network servers and applications; computer software for inventorying and 
monitoring computer hardware and software assets and use within an organization; computer application 
programs and operating system programs for use with communications servers; computer programs for managing 
communications and data exchange between computers and electronic devices; operating systems software for 
use in playing electronic games; computer hardware and peripherals; computer keyboards; computer mice and 
wireless computer mice; wireless communications devices, namely, mobile phones, cellular telephones, personal 
digital assistants, and hand-held computers; hardware for telecommunications for connecting devices via in-home 
phone and electrical wiring, namely, computer networks hubs, computer servers, set-top boxes, computer 
switches and computer routers designed to provide in-home voice over internet protocol (VOIP) communications; 
computer and video game systems devices, namely, electronic sensor devices, cameras, projectors, headphones, 
and microphones; electronic game equipment, namely, equipment communicating with a television or computer for 
playing electronic games. FIRST USE: 20120800. FIRST USE IN COMMERCE: 20120800 

1C 016. US 002 005 022 023 029 037 038 050. G & S: Publications, namely, user manuals, instruction guides, 
reference guides, books, magazines, and newsletters in the field of computers, computer software, business, 
business management and accounting, computer games, games and entertainment; stationery, stationery-type 
portfolios, stationery items, namely, pens, pencils, desk sets, pen and pencil holders, posters, memo pads, 
binders, calendars, notebooks, note cards. FIRST USE: 20120800. FIRST USE IN CCMMERCE: 20120800 

1C 025. US 022 039. G & S: Clothing, namely, shirts, sweatshirts, vests. Jackets, coats, sweaters, caps, headwear, 
hats, visors. FIRST USE: 20120800. FIRST USE IN CCMMERCE: 20120800 
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IC 028. US 022 023 038 050. G & S: Toys and sporting goods, namely, sport balls, golf balls, golf tees, squeezable 
balls, and flying disc toys; plush, stuffed, and soft sculptured toys; yo-yos; mechanical action toys. FIRST USE: 
20130800. FIRST USE IN COMMERCE: 20130800 

IC 035. US 100 101 102. G & S: Providing information in the fields of business and commerce over global 
computer networks and global communications networks; retail store services and online retail store services 
featuring computers, computer hardware, software, computer games, computer peripherals, portable music 
players and accessories, personal digital assistants, cell phones and accessories, video game consoles and 
accessories, webcams, books, clothing, back packs, messenger bags, computer bags and novelty items; business 
services, namely, business consultation and marketing services, business advice and information services; 
providing consumer product information via global computer networks; promoting the goods and services of others 
via global computer networks, procurement services for others; the bringing together, for the benefit of others, of a 
variety of goods and services, enabling customers to conveniently view and purchase those goods and services 
from an Internet web site particularly specializing in the marketing of the sale of goods and services of others. 
FIRST USE: 20120800. FIRST USE IN COMMERCE: 20120800 

IC 036. US 100 101 102. G & S: Providing information in the field of financial news; charitable services, namely, 
providing funding and financial assistance to computer and technology training organizations; financial services, 
namely, providing a virtual currency for use by members of an online community via global computer networks and 
global communication networks. FIRST USE: 20120800. FIRST USE IN COMMERCE: 20120800 

IC 038. US 100 101 104. G & S: Communication services, namely, electronic transmission of data and documents 
among users of computers; transmission of voice, audio, visual images and data by telecommunications networks, 
wireless communication networks, global communication networks and global computer networks; streaming of 
audio and video over global computer networks and global communication networks; information transmission via 
electronic communications networks; electronic mail and messaging services; electronic data transmission; 
electronic delivery of images and photographs via global computer networks; instant messaging services; voice 
over internet protocol (VOIP) services; audio and video broadcasting services over global communication 
networks and global computer networks; providing online chat rooms for social networking; consulting in the field 
of telecommunication services, namely, transmission of voice, data, and documents via telecommunications 
networks; consulting services in the field of communications; providing access to databases; providing user 
access to a global computer network. FIRST USE: 20120800. FIRST USE IN COMMERCE: 20120800 

IC 039. US 100 105. G & S: Electronic storage and archiving of files, documents, digital photographs, videos, 
music, electronic media, namely, images, text, and audio data; providing a web site and web site links to 
geographic information, map images, and trip routing; providing an online searchable computer database featuring 
travel information; providing information, news and commentary in the field of travel; transportation services, 
namely, providing information concerning motor vehicles, travel and travel-related subjects over computer 
networks and global communication networks. FIRST USE: 20120800. FIRST USE IN COMMERCE: 20120800 

IC 041. US 100 101 107. G & S: Providing information and training programs relating to opportunities for youth in 
the field of education, training, employment, and entrepreneurship; entertainment services, namely, providing 
online computer games, online electronic games and online video games; entertainment services, namely, 
providing websites featuring information in the fields of entertainment, music, movies, video, games, news, and 
sports; entertainment services, namely, providing websites featuring virtual environments in which users can 
interact for recreational, leisure or entertainment purposes; entertainment services, namely, providing interactive 
multiplayer game services for games played over global computer networks and global communication networks; 
providing information on the video game and computer game industries via global computer networks and global 
communication networks; providing information, news and commentary in the field of entertainment; providing 
information on computer games, video games, video game consoles and accessories thereof via global computer 
networks and global communication networks. FIRST USE: 20120800. FIRST USE IN COMMERCE: 20120800 

IC 042. US 100 101. G & S: Application service provider, namely, hosting, managing, developing, analyzing, 
updating and maintaining applications, computer operating systems, software, and web sites for others; providing 
technical support, consultation and resources in the fields of computer security, privacy and online safety; 
computer diagnostic services; computer services, namely, data recovery services; online technical support, 
troubleshooting, testing, and consulting services in the field of computers, computer software and computer 
systems; computer services, namely, computer system administration for others; computer services, namely, 
remote management of the information technology (IT) systems of others; computer services, namely, cloud 
hosting provider services; consulting services in the field of cloud computing; computer software design; computer 
software development and computer programming development for others; consultancy in the field of software 
design; consulting in the field of information technology; consulting services in the field of computer-based 
information systems for businesses; consulting services in the field of providing online, non-downloadable 
software and applications; providing online non-downloadable business and general purpose application software; 
providing online non-downloadable software for website development and database management; provide non- 
downloadable software for internet searching, database management, providing Internet search engine; providing 
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Owner 

Attorney of 
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Type of Mark 
Register 
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Indicator 


information in the field of computer systems, software, hardware, internet, networks, databases and mobile 
applications. FIRST USE: 20120800. FIRST USE IN COMMERCE: 20120800 

1C 045. US 100 101. G & S: Consulting services in the field of maintaining the security and integrity of databases; 
personal services, namely, providing online social networking services; providing online computer databases and 
online searchable databases in the field of social networking. FIRST USE: 20120800. FIRST USE IN 
COMMERCE: 20120800 

(3) DESIGN PLUS WORDS, LETTERS, AND/OR NUMBERS 

26.09.14 - Squares, three or more ; Three or more squares 
26.09.21 - Squares that are completely or partially shaded 

85710265 

August 22, 2012 

1A 

IB 

June 25, 2013 
4552363 

1142097 


June 17, 2014 

(REGISTRANT) Microsoft Corporation CORPORATION WASHINGTON One Microsoft Way Redmond 
WASHINGTON 980526399 

Matthew E. Moersfelder 

2250973;2637360;2730599;2843964;3877801 ;4029299;AND OTHERS 

Color is not claimed as a feature of the mark. The mark consists of four squares arranged in a rectangular grid 
adjacent to the wording "MICROSOFT". The squares are separated by blank space. 
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TESS HOME I NEW USER I STRUCTURED IfrEE FORmI Browse Oicr ISEARCH OG I BOTTOM I HELP 


Logout 


Please logout when you are done to release system resources allocated for you. 


Record 1 out of 1 


^ "Back" button of the Internet Browser to return to 

TESS) 

Office 

Word Mark OFFICE 

Goods and IC 009. US 021 023 026 036 038. G & S: Computer software and computer programs for use in database 

Services management, electronic spreadsheets, designing, creating, editing and publishing documents, note taking, email, 
calendaring, scheduling, contact information storage and management, accounting, customer relationship 
management, project management, presentation graphics, desktop publishing, web publishing, document 
management, database management, data collection, data analysis, graphics, presentation graphics, word 
processing, instant messaging. Voice over Internet Protocol (VoIP), video conferencing, audio conferencing, web 
conferencing and document sharing, application sharing, computer desktop sharing, file transfer, sensing and 
providing user presence information, telephony, real-time communications featuring instant messaging, audio, video 
and data exchange, mapping geographical locations, manipulating video, audio and graphics; communications 
software for managing the exchange of communications and data and information over computer networks, 
wireless networks, and global communications networks; computer communications software for use in accessing 
web sites and exchanging information and data and obtaining services from web sites; computer software for use in 
developing web sites, operating electronic mail and providing computer security; computer software for recording, 
organizing, editing and transmitting information in typed written and voice format; computer communications 
software for accessing web messaging and shared documents from web sites on the Internet; computer utility 
programs; computer software development programs; computer security and authentication software for controlling 
access to and communications with computers; computer software for computer network security, anti-virus 
protection, and intrusion detection and prevention; computer game software; house mark for a full line of business 
software applications. FIRST USE: 20121212. FIRST USE IN COMMERCE: 20121212 

Mark 
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Code 



Design 

Search 

Code 


26.05.21 - Triangles that are completely or partially shaded 
26.11.02 - Plain single line rectangles ; Rectangles (single line) 
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Published May 21,2013 

for 

Opposition 


Registration 

Number 


4456462 


Registration December 24, 2013 

Date 


(REGISTRANT) Microsoft Corporation CORPORATION WASHINGTON One Microsoft Way Redmond 
WASHINGTON 980526399 

Matthew E. Moersfelder 


Owner 

Attorney of 
Record 

Disclaimer NO CLAIM IS MADE TO THE EXCLUSIVE RIGHT TO USE "OFFICE" APART FROM THE MARK AS SHOWN 


Description 
of Mark 


Type of 
Mark 


Color is not claimed as a feature of the mark. The mark consists of a three-dimensional geometric design with two 
vertical sides and two horizontal sides. The vertical sides and top side are three-dimensional images of rectangular 
solids and the bottom side is a three-dimensional image of a triangle. To the right of the geometrical design is the 
word "Office". 
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ONEDRIVE 


Word Mark ONEDRIVE 

Goods and 1C 009. US 021 023 026 036 038. G & S: Computer software for receiving, displaying, storing, organizing and 
Services sharing with other users documents, sounds, music, videos, photographs, drawings, images and data stored 
electronically. FIRST USE: 20140219. FIRST USE IN COMMERCE: 20140219 

1C 038. US 100 101 104. G & S: Telecommunication services, namely, transmission of documents, sounds, music, 
videos, photographs, drawings, images and data by means of telecommunications networks, wireless 
communication networks, and the internet. FIRST USE: 20140219. FIRST USE IN COMMERCE: 20140219 

1C 042. US 100 101. G & S: Providing temporary use of non-downloadable software for receiving, displaying, 
storing, organizing and sharing with other users documents, sounds, music, videos, photographs, drawings, 
images and data stored electronically; Electronic storage of documents, sounds, music, videos, photographs, 
drawings, images and data for others. FIRST USE: 20140219. FIRST USE IN COMMERCE: 20140219 
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Owner (REGISTRANT) Microsoft Corporation CORPORATION WASHINGTON One Microsoft Way Redmond 
WASHINGTON 980526399 
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Matthew E. Moersfelder 


Priority Date September 4, 2013 
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start 
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OR 
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to record: 


Record 2 out of 2 


^ "Back" button of the Internet Browser to return to 

TESS) 


ONEDRIVE 


Word Mark ONEDRIVE 

Goods and 1C 009. US 021 023 026 036 038. G & S: computer software for use in electronic storage of data featuring cloud 
Services computing. FIRST USE: 20140219. FIRST USE IN COMMERCE: 20140219 

1C 038. US 100 101 104. G & S: Data communication over local networks, wireless networks and global 
communications networks, including the internet, intranets, extranets, television, mobile communication, cellular 
and satellite networks. FIRST USE: 20140219. FIRST USE IN COMMERCE: 20140219 


1C 039. US 100 105. G & S: Electronic storage of data, text, images, audio, video; storage services for archiving 
electronic data. FIRST USE: 20140219. FIRST USE IN COMMERCE: 20140219 


1C 042. US 100 101. G & S: Application Service Provider (ASP) services featuring software for authoring, 
downloading, transmitting, receiving, editing, extracting, encoding, decoding, displaying, storing and organizing text, 
graphics, images, and electronic publications. FIRST USE: 20140219. FIRST USE IN COMMERCE: 20140219 
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Mark 

Drawing 

Code 
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Number 


SHAREPOINT 

1C 042. US 100 101. G & S: Cloud computing featuring software for use in document management, authoring and 
publishing, developing customized internal network sites, designing, creating, maintaining and accessing 
document management, authoring, storage and retrieval systems, and accessing remotely stored data for such 
applications; Providing temporary use of on-line non-downloadable software and applications for document 
management, authoring and publishing internal network sites, developing customized internal network sites, 
designing, creating, maintaining and accessing document management, authoring, storage and retrieval systems; 
Providing technical information in the field of computer software and cloud computing. FIRST USE: 20081117. 
FIRST USE IN COMMERCE: 20081117 
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Date 

Owner (REGISTRANT) Microsoft Corporation CORPORATION WASHINGTON One Microsoft Way Redmond 
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Attorney of 
Record 


Matthew E. Moersfelder 
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2830919;2841861 ;2854862 
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Record 2 out of 9 


( Use the "Back" button of the Internet Browser to return to 
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SHAREPOINT 


Word Mark SHAREPOINT 

Goods and 1C 042. US 100 101. G & S: computer services, namely, providing search engines for obtaining data on a global 
Services computer network; [and ] * providing temporary use of non-downloadable workgroup and document management 
software for use in creating * managing databases and web sites, and producing and managing documents; on-line 
web site information services, namely, providing computer users with databases and web site links to facilitate 
workgroup collaboration and document creation and management; computer consultation services and technical 
support services in the fields of computers, computer networks, software, document management, and workgroup 
systems; and providing an on-line computer database in the fields of computers, computer networks, software and 
computerized document management and workgroup systems via computer networks and global communication 
networks. FIRST USE: 20021015. FIRST USE IN COMMERCE: 20021015 
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Goods and 1C 035. US 100 101 102. G & S: Organizing, arranging, conducting and promoting of trade shows, exhibitions and 
Services business conferences in the fields of computers, software, document management systems and workgroup 

software; [ small business on-line information services, namely, providing databases and web site links to other 
content providers in the field of small business issues; ] and providing business information via computer networks 
and global communication networks. FIRST USE: 20021015. FIRST USE IN COMMERCE: 20021015 

(1) TYPED DRAWING 
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78975285 
June 22, 2000 
1A 

IB 

October 16, 2001 

2849823 
June 1,2004 

(REGISTRANT) Microsoft Corporation CORPORATION WASHINGTON One Microsoft Way Redmond 
WASHINGTON 980526399 

Matthew E. Moersfelder 

SERVICE MARK 
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( Use the "Back" button of the Internet Browser to return to 
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Word Mark SHAREPOINT 


Goods and 
Services 


Mark 

Drawing 

Code 


1C 009. US 021 023 026 036 038. G & S: computer software for use in project management; computer software for 
designing, creating, maintaining and accessing customized internal network sites and global communication 
network sites; computer authoring software for use on internal computer networks and global communication 
networks, namely, software for creating, editing and delivering textual and graphic information, locally and remotely; 
computer programs for developing other computer programs; utility programs for creating internal network and 
global communication network applications; computer programs for assisting developers in creating program code 
for use in internal computer networks and global communication networks; software for designing, creating, 
maintaining and accessing document management, authoring, storage and retrieval systems; software for 
document authoring, storage, retrieval, contention control, version history tracking, profiling, access control, and 
security; software for automatically notifying users when documents have been updated; software for meeting and 
event scheduling and notification and for posting announcements on internal network sites and global 
communication network sites; software for posting links to internal network sites and global communication network 
sites and global communication network sites; software for categorizing, searching and retrieving documents and 
data on internal computer networks; computer programs for use on and with computer networks and global 
communication networks, namely, user identification, registration and authorization programs; programs for 
automating login procedures to access web sites or internal networks; security and encryption programs; programs 
for maintaining user privacy; programs for maintaining and updating user profiles; programs for maintaining server 
profiles; computer software for use in developing other computer programs for use by workgroups and in project 
management applications. FIRST USE: 20010500. FIRST USE IN COMMERCE: 20010500 
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1C 038. US 100 101 104. G & S: providing on-line chat rooms for transmission of messages among computer users 
concerning computers, computer software, document management, workgroups, business communications, 
business management and advertising, and small business issues. FIRST USE: 20021015. FIRST USE IN 
COMMERCE: 20021015 
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Goods and 1C 009. US 021 023 026 036 038. G & S: Computer software and computer programs for database management, 

Services electronic spreadsheets, designing, creating, editing and publishing documents, note taking, email, calendaring, 

contacts management, presentation graphics, desktop publishing, document management, word processing, 
instant messaging. Voice over Internet Protocol (VoIP), video conferencing, audio conferencing, application 
sharing, computer desktop sharing, file transfer, sensing and providing user presence information, and telephony, 
computer network security, anti-virus protection, and intrusion detection and prevention. FIRST USE: 20110417. 
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1C 042. US 100 101. G & S: Computer services, namely, providing on-line non-downloadable software for 
database management, electronic spreadsheets, designing, creating, editing and publishing documents, note 
taking, email, calendaring, contacts management, presentation graphics, desktop publishing, document 
management, word processing, instant messaging. Voice over Internet Protocol (VoIP), video conferencing, audio 
conferencing, application sharing, computer desktop sharing, file transfer, sensing and providing user presence 
information, and telephony, computer network security, anti-virus protection, and intrusion detection and 
prevention. FIRST USE: 20110417. FIRST USE IN COMMERCE: 20110417 
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